Information Security Architect

The Information Security Architect is a senior technical role responsible for leading the design and delivery of security solutions across the organisation’s infrastructure and technology programmes. This individual will serve as a subject matter expert on complex security infrastructure projects, providing architecture and design guidance to ensure that all solutions are secure by design and aligned to the organisation’s risk appetite and strategic security vision. The role has two primary pillars of responsibility. First, the Architect will drive solution designs for strategic security infrastructure initiatives, including but not limited to Zero Trust Network Access (ZTNA), Privileged Identity and Access Management (PIM/PAM), Passwordless Authentication, Network Segmentation, Data Loss Prevention (DLP), Cloud Access Security Broker (CASB) technologies and implementing best practices for Vulnerability Management and Threat Detection capabilities. Second, the Architect will act as an Information Security Review (ISR) resource, assisting with IT project reviews and risk assessments to ensure appropriate security controls are embedded throughout the project lifecycle. The successful candidate will bring strong technical depth across security architecture domains, the ability to communicate complex security concepts to both technical and non-technical stakeholders, and a pragmatic approach to balancing security requirements with business objectives. This role sits with the Security Operations function of the Information, Security and Risk department to ensure all controls are operationally effective, integrated into detection tooling, and optimised for real-world threat response.